Add frame-src for IE/Edge compatibility
This commit is contained in:
@@ -35,6 +35,8 @@ module.exports = {
|
|||||||
* domain which will serve your CryptPad instance.
|
* domain which will serve your CryptPad instance.
|
||||||
*/
|
*/
|
||||||
"child-src blob: *",
|
"child-src blob: *",
|
||||||
|
// IE/Edge
|
||||||
|
"frame-src blob: *",
|
||||||
|
|
||||||
"media-src * blob:",
|
"media-src * blob:",
|
||||||
|
|
||||||
@@ -62,7 +64,9 @@ module.exports = {
|
|||||||
/* See above under 'contentSecurity' as to how these values should be
|
/* See above under 'contentSecurity' as to how these values should be
|
||||||
* configured for best effect.
|
* configured for best effect.
|
||||||
*/
|
*/
|
||||||
"child-src *",
|
"child-src *",
|
||||||
|
// IE/Edge
|
||||||
|
"frame-src *",
|
||||||
|
|
||||||
// see the comment above in the 'contentSecurity' section
|
// see the comment above in the 'contentSecurity' section
|
||||||
"connect-src 'self' ws: wss:" + domain,
|
"connect-src 'self' ws: wss:" + domain,
|
||||||
|
|||||||
Reference in New Issue
Block a user